Описание
In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| ruby-ox | fixed | 2.8.2-1 | package | |
| ruby-ox | no-dsa | stretch | package | |
| ruby-ox | no-dsa | jessie | package |
Примечания
https://github.com/ohler55/ox/issues/195
https://github.com/ohler55/ox/pull/196
https://github.com/ohler55/ox/commit/0708ae44faf2ffc3d9330daf6ae023859a8b168b
Связанные уязвимости
CVSS3: 5.5
ubuntu
почти 8 лет назад
In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse.
CVSS3: 5.5
nvd
почти 8 лет назад
In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the read_from_str function in sax_buf.c when a crafted input is supplied to sax_parse.
